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^JL^ system for delivering institutional data to a customer, comprising: 

an institutional server, wherein the/institutional server includes a system for separately 
serving a first database containing private data and a second database containing public data; 

a service provider, wherein the service provider includes a system for receiving an 
encrypted version of the private data arm an unencrypted version of the public data; and 

a client, wherein the client inc]|udes a system for displaying a merged version of the 
private and public data. 
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2. The system of claim 1, wherein/the client includes a mechanism for decrypting the 
encrypted private data. 

3. The system of claim 1, further comprising a system for making the customer anonymous 
to the service provider. 



1 
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4. The system of claim 3, wfierein the system for making the customer anonymous to the 
service provider includes a piechanism for determining a service level available to the 
customer. 
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5. The system of claim lj wherein the service provider includes a system for analyzing the 
use of the public data bwhe customer without knowing an identity of the customer. 
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6. The system of claim 1, wherein the me/ged version of the private and public data is 
downloaded to the client by the service provider. 

7. The system of claim 1, wherein the private and public data are downloaded to the client by 
the institutional server and service provider, respectively. 

8. The system of claim 1, wherein the encrypted version of the private data is encrypted 
using a public key infrastructuraprotocol. 

9. The system of claim 1, wherein the client includes an interface that can be customized into 
a first window for viewing tne public data and a second window for viewing the private data. 
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10. A method of preserving privacy between t customer and an institution in a computer 
network environment, comprising the steps df: 

separating data associated with the institution into a first database of private data and 
a second database of public data; / 

storing an encrypted copy of thejprivate data and an unencrypted copy of the public 
data with an intermediary service prov/der; 

providing to the customer a security system that allows the customer to decrypt the 
encrypted data and remain anonymous to the intermediary service provider; 

merging the encrypted copy/of the private data and the unencrypted copy of the public 
data; and J 

providing an interface thai allows the customer to view the merged data. 

11. The method of claim 10, wnerein the security system includes a public key infrastructure 
protocol. I 

12. The method of claim lojcomprising the further step of customizing the interface to 
include a first window for viewing the public data and a second window for viewing the 
private data. I 

13. The method of claim |10, wherein the public data includes data available externally to the 
institution. 1 
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14. A method of preserving privacy between a customer and an institution in a computer 
network environment, comprising the steps of: 

separating data associated with me institution into a first database of encrypted private 
data and a second database of public data; 

loading an unencrypted copy if the public data to a service provider; 

loading to a client the encrypted private data from the institution and the unencrypted 
copy of the public data from the service provider; 

providing to the customer a security mechanism that allows the customer to decrypt 
the encrypted data and remain anor ymous to the service provider; and 

providing an interface that illows the customer to view the encrypted copy of the 
private data and the unencrypted copy of the public data. 



15. The method of claim 14, wherein the security mechanism includes a public key 
infrastructure protocol. 

16. The method of claim 14, comprising the further step of customizing the interface to 
include a first window for viewipg the public data and a second window for viewing the 
private data. 



17. The method of claim 14, yherein the public data includes data available externally to the 
institution. 
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18. A program product stored on a recordable medium that when executed, preserves privacy 
between a customer and an institution im a computer network environment, comprising: 

a system for separating data associated with the institution into a first database of 
encrypted data and a second databaseiof unencrypted data; 

a system for providing a copy of the second database of unencrypted data to an 
intermediary service provider; 

an interface that allows thefcustomer to view the first database of encrypted data and 
the copy of the second database of unencrypted data provided to the intermediary service 
provider; and 

a security system that allows the customer to decrypt the encrypted data and remain 
anonymous to the intermediary service provider. 



19. The program product of cl#m 

a system for providing 
intermediary service provider. 



18, further comprising: 
copy of the first database of unencrypted data to the 
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